Analysis
-
max time kernel
143s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/06/2024, 18:36
Static task
static1
Behavioral task
behavioral1
Sample
95e01fe64821232f2be6939a99a99f88_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
95e01fe64821232f2be6939a99a99f88_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
95e01fe64821232f2be6939a99a99f88_JaffaCakes118.html
-
Size
218KB
-
MD5
95e01fe64821232f2be6939a99a99f88
-
SHA1
797334051701424bffe5602f919441a21a28176a
-
SHA256
3fd57c1f63c8778cc55c91a21c4007f48021fdac1bf9df3a9635109653359179
-
SHA512
9a009daabf0bc85dffed890d4a5cbc95f112fe454c00fd3e00100bd6153c441c08fb63e882efc68edc8f85b11c40f5462d319c61e596837d7a4248baecfb297b
-
SSDEEP
3072:SdX6dW9msSSyfkMY+BES09JXAnyrZalI+YQ:SdX6I9m1XsMYod+X3oI+YQ
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000fdebe683ce095945aaa67fc3e0e9f72200000000020000000000106600000001000020000000db7483faa9eedd0162a48f4b04a808fbf8254d684ad5b233110d56bf3ca158b8000000000e8000000002000020000000e303c83ea8cc9e7ee4b9032dae9e1054980553c83935562d8bd8e42995f835f320000000aec4a5bbac8ae0a067786e4afa2281c86d5c01fc1e73892b687d55807c5869f14000000026a6e46fec5733c4d922de38524acede8a71a52e052b923e3a591cdcc945c3473b2ea84daf050c1d622a684f16fe881a670ca5f638d695dfbc5fb6c04b701abe iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{6FCFEF81-22A1-11EF-9542-4A4F109F65B0} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423688091" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b0c18d87aeb6da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2796 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2796 iexplore.exe 2796 iexplore.exe 2252 IEXPLORE.EXE 2252 IEXPLORE.EXE 2252 IEXPLORE.EXE 2252 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2796 wrote to memory of 2252 2796 iexplore.exe 28 PID 2796 wrote to memory of 2252 2796 iexplore.exe 28 PID 2796 wrote to memory of 2252 2796 iexplore.exe 28 PID 2796 wrote to memory of 2252 2796 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\95e01fe64821232f2be6939a99a99f88_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2796 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2796 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2252
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD531dfc27e1a61ccc0de3a2fcc355f58a2
SHA1aba8d22bfe0b4bbc77ebfe7b8bb17f244ddab5d3
SHA256f9e0877dde9555e2281d1bbdd00d92d7ec361d468b3f30756f76fd16328332d2
SHA5121cf452b3819d25cf4ab8d3eb3d1b3bde11e7e9682aceec999115c32484079ec71b7de61d1578e2bc9d545a87d49a56820fa7883a3db34208e719f69334dae154
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53dab967681c4fdc6c4509d68e565a467
SHA1229df4b133b4de7a5c80ce69bcfa8ae931e40b17
SHA25690ff745f24fdddf9b58df908e182465cd149ea416687d0fda45262a73ab59b5a
SHA51212702c3bcab07b20779aed3dfff72b1ae1338468c05569fc7d601eb60dd1d0ec752f5852c0ed7cc643e6d856131cc5cda525322d55a566ce311d5dbe4d277094
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD519048ad00a46e4abcc4a847d687e9d56
SHA15400799fb8d9842e508c92ea99d72e688d18b1a9
SHA256c17c51581e2f3c43fde44ad865281fb488c89d0dd131b46022857b7424caa11d
SHA512c43142cfc0cc8ac29fbc7b63ce7f5b01174d93d71e40ba020c6d569bc498f2b3c36d302be1a04246e65253bec713b8943d6c2eb6bad2dc9c02b8467ea2850bfd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f43c1ce902606ff8fb08a948f122c5d2
SHA1f018f144373a9838f1a61ebf78580315c175697a
SHA256a9bf3b7e12c7c9e6894fe49aad20d67de3e5048637334e699701c1562c57bbfb
SHA512122877dfb8d05298ba990a05c5c93368f6f86da7ba8f88b404c6574e8b06ba1a92991f769289f9748c8bee931f447c8586996ef1b939a35ad6f23281e0ed4e05
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD560aff6f27a2abb24e4fb404b325ba8fd
SHA1f79d7a321837c0b7233c931231393cc41f6add2a
SHA25639c0f19891e968fe298ce7789d2e697d658120d7f4d9abcef1d6d04430078ede
SHA512c7c0fcda54f7cdc3057c9fb0b75e88396ba7a5f01deaebfd5d2dfa6316bbf98b6a01f5f948b547f06cf830980e4ca0cacd8be6597b17775257eb42f49874aba9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD573ba0d13b5d9339f9d0681df05da7b38
SHA1dbb64cf45c1f4c10bfb5778a61d26c8fdd3f4853
SHA2562e5c02d8982b13738fb2ff222490e9ccf85d6bd8ad895995267065b7cd7d9d3c
SHA5125cdbc4b25c8330584a43a8fc0b4c3b3337906a32a49fbaf46b4695957ca86789289db4b3e7f8fd50e1ba1544b67b845e58d3edfe20b148ea4224dc63445d1121
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD580bce784ce552a75a522de9cdacd65c1
SHA19bfad2a7103bb408798d48cac73802a896852a79
SHA25617fc1eaaa89156bc18a1cf710c9f9c5df7a39dd2cb04380c16091023a5e5aa59
SHA512635e6add875385b2d3e41587953d289a67e3a61d2fec6c05db111b81aace72dfea2c1ac54a4fde31fcffbe789ddf76fbb0fc30493f88329213314f3f1f83dc03
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d02ea764792589d774041cb350bfafcd
SHA160f6583cf267bea47e05b4e1fead880501b3327f
SHA2568d76959dbc634b6fbff95ac499e949e6b10c9336374d60b779f573f42cf0b23d
SHA5120e8c87e45f8803ef91f07def8ac7d79325072d71360139ee5ffd4a90e27e84170c189806592c112f4898e26d9038a8d75267109c6a30999b8a653d84a360fbc4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD542a699d6ebccc5e5df6f81430033e3dc
SHA1f2e4b4a0abb6ef05eea2cf96eda44d8827bb808b
SHA256a14536675b573fd8feb6d25e1502997d5eecd5cc78e8eb6b797c9e24889ad668
SHA5121bece86a511fc51e716c112afefb6e6788b1dea82019292fb950efad0b3311ef92363805e7c3c4947253ecc5525eea80b769191bd766b3a0317f926304a4ef1d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5724e5fca1cac813d9aa7138a13d94081
SHA109803a15f2aeff2d07781c9cdcd3f258b55e63e2
SHA256840f88d3b4d9572f09b06e47615e3128d5b2566909d67ebd83a1aab053dbf80f
SHA5128d862983af8ad44418a305d524d8453e82c5af2ab700c1dfbd6913f6e2fa1905704baabc06d3317d4340010947662638f8c6832d48f943d4ee66c16ed364df27
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ea67f82ae396fc7672cc877483c55315
SHA10adbafc5a2e341278218382a6c061f0df8954722
SHA256a595e163d93849b0c86ef0df58e309e87c2c49e902d96794dc56c8263acaad59
SHA51236fc50a36adbf66dcf472baf1fe2e6bdb3500c55a1240201ecb4eaa698962bd54918a296d6a166b9f0899f5c3cca0cd7cdde0e3ff9195c49d40821f85ad3ef78
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5635218b9d2e7f37938b15b76afd3c53c
SHA1923236b9e203a5c239803952558d110fe2bd0660
SHA2562e6e7877b229b9d6aef6ef7fade7d965448f560dad501099cb7c5647d0410fca
SHA51258d630c0a978744056adf7276727603030fa01d29f112230b4c26426ef2760749b60d3ab7774831d42710d02c330031359e182fc8bfce1cc66182f0d2729277f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54c2edb60bbdf349b3f4ad7e5b3e24c8d
SHA1fbe115208c3921f03ae837d44cdde428382c37ae
SHA2564cb7fa6762173b30247043e9b6150b4f50aafdb20da4070374f079f385755aa7
SHA512c8fef604e0dad7cdd47187b25e9c91e02c0b0e0232930012b45cc129c338b619ef8f20b95d9d04928bbf4526b5202355c9c074ea2cc245eb380905f05fb1ee7c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57e712cd124f4e0fcafeb9333a1354465
SHA1e4ad8e5bcf68c159eca2f0259e186e1c586490b4
SHA256ad0013fdd9bb66d8d7a6c50eaf3a65eb5522c17c3e713ca0a70136462d1088db
SHA51216c839f9e7604b95e6b9e1adbc3d5fe6b07daff5c7b02440dd9c99611749254eec2159dc0d5f13c08e637cf71b84af1a57390ccfb820641ed8ed1ba1203c2efe
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e339866f11092dc070873fa4442ae213
SHA106ccc4e18673a6660c38d6e213e800b588754594
SHA256abdceab18589651947427489776aa25725b64271244479d3fb4dd86b6df4b759
SHA512b7466f53988cb7c07b15838197fff4145e3fd2bb01a1d67419e5e650e6bb341b93393dead47029bbd8f33e37c650cb1d8990b8fe3f434cf48ad1a3dd0adf887e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53daa2cd705d3d427e3d03c86dc2ff11b
SHA100dfb53e133467ec81cb31c556708b2fe8ef223f
SHA256041366fe63d116253db060a279cdb919e5d6f9b7ee83a4460a2f756a9ab2a0c2
SHA512b44bdfff311f7a677395a8ddc4375eae6a237e18d966e9498fff9310032d51e1f66087a97a3c3063359876e1a2587d92574d33bcfa7ff13507ae3509dc4909d7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5116a2c913e12f0ad82275ed47a0fdd98
SHA1a729ed8828e4c0b8c69c4d93339f23fd7e94b542
SHA25686128a068879ef1a7ce37f429292b7b5f4494bb848ccbe94cdb8ae20d7800ebf
SHA512d17114ca297df254616a1a660f6cc05a6b1deaa66bdbf75002dad3cd464cc74178873c75c887e492a63ea68e101b1b055634aaa0dc8a0e570a7231af6249860d
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b